EarcmsCVEs & Vulnerabilities
2 CVEs affecting Earcms products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
ear 1ear music 1
CVE-2020-18912CRITICAL
An issue found in Earcms Ear App v.20181124 allows a remote attacker to execute arbitrary code via the uload/index-uplog.php.
30 Aug 2023
9.8
CVSS
CVE-2017-11756HIGH
In Earcms Ear Music through 4.1 build 20170710, remote authenticated users can execute arbitrary PHP code by changing the allowable music-upload extensions to include .php in addition to .mp3 and .m4a in admin.php?iframe=config_upload, and then using user.php/music/add/ to upload the code.
30 Jul 2017
7.0
CVSS
← PrevPage 1 / 1Next →